CVE-2026-108781

A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface. Performing a manipulation of th...

CVE-2026-108779

A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController.java. Such manipulation of the argument searchstr leads to sql injection. The attack may be...

CVE-2022-25062

CVE-2022-25062 This script exploits a vulnerability IoF in the TPLink WR840N router, using a field for injecting code in the module DNS...

CVE-2022-46169_poc

CVE-2022-46169 unauthenticated remote code execution Description Authentication Bypass: a hostname-based authorization check is not implemented safely for most installations of Cacti Command Injection: unsanitized user input is propagated to a string used to execute an external command Demo POC...

glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

GL.iNet Beryl AX Triple RCE PoC PoC for three unauthenticated command injection vulnerabilities CVE-2026-11450, CVE-2026-11451, CVE-2026-11452 in the GL.iNet GL-MT3000 Beryl AX travel router firmware = 4.4.5. Full writeup:...

CVE-2023-44766_ConcreteCMS-Stored-XSS---SEO

ConcreteCMS Stored XSS v.9.2.1 Author: Sergio Description: Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Extra from Page Settings. Attack Vectors: Scripting A vulnerability in the sanitization of the...

memhunter

Memhunter Caza automatizada de malware residente en memoria a escala Este proyecto está EN DESARROLLO. Espere cambios de funcionalidad y lanzamientos binarios en las próximas semanas. Resumen Memhunter es una herramienta de sensor de endpoint especializada en detectar malware residente, mejorando...

CVE-2025-2304-CamaleonCMS-PoC

PoC: CVE-2025-2304 - Camaleon CMS Privilege Escalation Technical Overview This repository contains a Functional Proof of Concept PoC for a Mass Assignment vulnerability in Camaleon CMS versions prior to 2.8.1. The vulnerability resides in the updatedajax endpoint of the User Management module,...

crlfuzz

CRLFuzz Una herramienta rápida para escanear vulnerabilidades CRLF escrita en Go Recursos Instalación desde Binario desde Código Fuente desde GitHub Uso Uso Básico Banderas Objetivo URL Única URLs desde lista desde Stdin Método Datos Añadir Cabeceras Usar Proxy Concurrencia Silencio Verboso Versi...

CVE-2026-82222

CVE-2026-82222 — GiveWP Author: Rx019 CVSS: 10.0 Critical Type: Unauthenticated PHP Object Injection → Remote Code Execution Plugin: GiveWP give — Donation Plugin and Fundraising Platform Affected: Patched: 4.16.8 Description GiveWP stores a donor's lastname in the PHP session without sanitizatio...

CVE-2026-46368-OpenWrt-Exploit

OpenWrt luci-app-https-dns-proxy Authenticated Command Injection CVE-2026-46368 This repository contains the Proof of Concept PoC exploit for a critical OS command injection vulnerability in luci-app-https-dns-proxy that results in arbitrary command execution as root. CVE ID: CVE-2026-46368...

-Remcos-RAT-Fileless-svchost-Injection-Obfuscated-Payload-Analysis-

1. Remcos – svchost Injection via Native API Calls The following Binary Ninja snippet reveals the core injection mechanism used by Remcos to inject its payload into svchost.exe. What This Code Does: CreateProcessW with the CREATESUSPENDED flag starts a new svchost process in a suspended state...

cve-2024-4367-poc

CVE-2024-4367 POC for PDF.js POC for PDF.js' CVE-2024-4367 vuln - The pdf-modify.py script can be used to modify your PDFs and inject payloads. Usage 1. Ensure CVE-2024-4367-POC-base-placeholder.pdf is in the working directory. 2. Uncomment/modify the payloadnew variable in pdf-modify.py. 3. Run...

ghostlock-s25fe

GhostLock CVE-2026-43499 for the Galaxy S26 CVE-2026-43499 ported to the Samsung Galaxy S26 series — Android 16 / GKI 6.12. One binary, three kernel lines, dynamic parameter matching at runtime: theoretically covers the whole S26 series without per-build compilation. Most GhostLock porting effort...

CVE-2026-108782 erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList sql injection

A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeecgframework/core/common/service/impl/CommonServiceImpl.java of the component Autocomplete Handler. Executing a manipulati...

EUVD-2026-97136

A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeecgframework/core/common/service/impl/CommonServiceImpl.java of the component Autocomplete Handler. Executing a manipulati...

CVE-2026-108782

A SQL injection vulnerability exists in the erzhongxmu JEEWMS software, affecting versions up to 2026.09.27-W39 . The flaw is located within the Autocomplete Handler component, specifically in the CommonServiceImpl.getAutoList function of the file src/main/java/org/jeecgframework/core/common/serv...

EUVD-2026-97131

A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection...

EUVD-2026-97129

A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a manipulation of the argument goodscode results in sql injection. The attack may be initiated remotely...

EUVD-2026-97130

A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The...